CVE-2018-1775 IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating....
MediumCVSS 6.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm spectrum virtualize software | >= 7.5, <= 8.2 | No fix listed |
| ibm spectrum virtualize software for public cloud | >= 7.5, <= 8.2 | No fix listed |
| ibm torwize V7000 | = 7.5 | No fix listed |
| ibm torwize V7000 | = 8.2 | No fix listed |
| ibm torwize V3500 | = 7.5 | No fix listed |
| ibm torwize V3500 | = 8.2 | No fix listed |
| ibm torwize V3700 | = 7.5 | No fix listed |
| ibm torwize V3700 | = 8.2 | No fix listed |
| ibm spectrum virtualize for public cloud | = 7.5 | No fix listed |
| ibm spectrum virtualize for public cloud | = 8.2 | No fix listed |
| ibm spectrum virtualize software | = 7.5 | No fix listed |
| ibm spectrum virtualize software | = 8.2 | No fix listed |
| ibm san volume controller | = 7.5 | No fix listed |
| ibm san volume controller | = 8.2 | No fix listed |
| ibm FlashSystem V9000 | = 7.5 | No fix listed |
| ibm FlashSystem V9000 | = 8.2 | No fix listed |
| ibm torwize V5000 | = 7.5 | No fix listed |
| ibm torwize V5000 | = 8.2 | No fix listed |
| ibm FlashSystem 9100 Family | = 7.5 | No fix listed |
| ibm FlashSystem 9100 Family | = 8.2 | No fix listed |
References
- 107187 third-party-advisory vdb-entry
- ibm-storwize-cve20181775-file-download(148757) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory